Difference between revisions of "OPS345 Lab 7"
(Created page with "* dovecot with imaps * webmail") |
|||
| Line 1: | Line 1: | ||
* dovecot with imaps | * dovecot with imaps | ||
* webmail | * webmail | ||
| + | |||
| + | * dovecot installed in previous lab | ||
| + | * use the same keys generated in www lab: | ||
| + | * scp -P 2212 -i keys/ssh/ops345-all-aws-machines.pem keys/asmith15.ops345.ca.* andrew@34.202.103.43:~ | ||
| + | * [root@email andrew]# cp asmith15.ops345.ca.cert.pem /etc/pki/tls/certs/ | ||
| + | * [root@email andrew]# cp asmith15.ops345.ca.key.pem /etc/pki/tls/private/ | ||
| + | * configure postfix to enable encrypted connections from client software. add this to the bottom of main.cf: | ||
| + | <source># Settings to enable secure SMTP via STARTTLS using my key and certificate: | ||
| + | smtpd_tls_auth_only = no | ||
| + | smtpd_use_tls = yes | ||
| + | smtp_use_tls = yes | ||
| + | smtpd_tls_key_file = /etc/ssl/private/vm2.andrewsmith.ops.key | ||
| + | smtpd_tls_cert_file = /etc/ssl/certs/vm2.andrewsmith.ops.crt | ||
| + | smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem | ||
| + | tls_random_source = dev:/dev/urandom | ||
| + | smtpd_tls_loglevel = 1</source> | ||
| + | * test with telnet/EHLO: should say 250-STARTTLS | ||
| + | * | ||
Revision as of 02:36, 30 November 2021
- dovecot with imaps
- webmail
- dovecot installed in previous lab
- use the same keys generated in www lab:
- scp -P 2212 -i keys/ssh/ops345-all-aws-machines.pem keys/asmith15.ops345.ca.* andrew@34.202.103.43:~
- [root@email andrew]# cp asmith15.ops345.ca.cert.pem /etc/pki/tls/certs/
- [root@email andrew]# cp asmith15.ops345.ca.key.pem /etc/pki/tls/private/
- configure postfix to enable encrypted connections from client software. add this to the bottom of main.cf:
# Settings to enable secure SMTP via STARTTLS using my key and certificate:
smtpd_tls_auth_only = no
smtpd_use_tls = yes
smtp_use_tls = yes
smtpd_tls_key_file = /etc/ssl/private/vm2.andrewsmith.ops.key
smtpd_tls_cert_file = /etc/ssl/certs/vm2.andrewsmith.ops.crt
smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem
tls_random_source = dev:/dev/urandom
smtpd_tls_loglevel = 1- test with telnet/EHLO: should say 250-STARTTLS
